(Wireless) ADSL VPN Firewall Router with 3DES Accelerator

Chapter 4: Configuration

70

Mode:

You may select

Stateful

or

Stateless

mode. The key will be changed every 256

packets when you select Stateful mode. If you select Stateless mode, the key will be

changed in each packet.

Idle Time

: Auto-disconnect the VPN connection when there is no activity on the connection

for a predetermined period of time. 0 means this connection is always on.

Click

Apply

after changing settings.

(Wireless) ADSL VPN Firewall Router with 3DES Accelerator

Chapter 4: Configuration

71

LAN to LAN PPTP Connection

Connection Name:

A user-define description of the connection.

Type:

Check

Dial Out

if you want your router to operate as a client (connecting to a remote

VPN server, e.g. your office server), check

Dial In

operates as a VPN server.

When configuring your router establish the connection to a remote LAN, enter the remote

Server IP

Address

(or Hostname)

you wish to connection to.

When configuring your router as a server to accept incoming connections, enter the

Private IP Address Assigned to Dial in User

address.

Peer Network IP:

Enter Peer network IP address.

Netmask:

Enter the subnet mask of peer network based on the Peer Network IP setting.

Username:

If you are a Dial-Out user (client), enter the username provided by your Host.

If

you are a Dial-In user (server), enter your own username.

Password:

If you are a Dial-Out user (client), enter the password provided by the your Host.

If you are a Dial-In user (server), enter your own password.

PPP Authentication Type:

Default is

Auto

if you want the router to determine the

authentication type to use, or else manually specify CHAP (Challenge Handshake

Authentication Protocol) or PAP (Password Authentication Protocol) if you know which type

the server is using (when acting as a client), or else the authentication type you want clients

connecting to you to use (when acting as a server). When using PAP, the password is sent

unencrypted, whilst CHAP encrypts the password before sending, and also allows for

challenges at different periods to ensure that the client has not been replaced by an intruder.

Data Encryption:

Data sent over the VPN connection can be encrypted by an MPPE

algorithm. Default is

Auto,

so that this setting is negotiated when establishing a connection,

or else you can manually

Enable

or

Disable

encryption.

(Wireless) ADSL VPN Firewall Router with 3DES Accelerator

Chapter 4: Configuration

72

Key Length:

The data can be encrypted by MPPE algorithm with 40 bits or 128 bits. Default

is

Auto

, it is negotiated when establishing a connection. 128 bit keys provide stronger

encryption than 40 bit keys.

Mode:

You may select

Stateful

or

Stateless

mode. The key will be changed every 256

packets when you select Stateful mode. If you select Stateless mode, the key will be

changed in each packet.

Idle Time

: Auto-disconnect the VPN connection when there is no activity on the connection

for a predetermined period of time. 0 means this connection is always on.

Click

Apply

after changing settings.

(Wireless) ADSL VPN Firewall Router with 3DES Accelerator

Chapter 4: Configuration

73

IPSec

Click

Create

to configure a new IPSec VPN connection.

(Wireless) ADSL VPN Firewall Router with 3DES Accelerator

Chapter 4: Configuration

74

Configure a new VPN Connection

Connection Name:

A user-defined name for the connection (e.g. “connection to office”).

Local:

Local Network:

Set the IP address, subnet or address range of the local network.

~

Single Address:

The IP address of the local host.

~

Subnet:

The subnet of the local network. For example, IP: 192.168.1.0 with netmask

255.255.255.0 specifies one class C subnet starting from 192.168.1.1 (i.e. 192.168.1.1

through to 192.168.1.254).

~

IP Range:

The IP address range of the local network. For example, IP: 192.168.1.1, end

IP: 192.168.1.10

Remote:

Secure Gateway Address (or hostname):

The IP address or hostname of the remote VPN

device that is connected and establishes a VPN tunnel.

Network:

Set the IP address, subnet or address range of the remote network.

Proposal:

Proposal:

Select the IPSec security method. There are two methods of checking the

authentication information, AH (authentication header) and ESP (Encapsulating Security

Payload). Use ESP for greater security

so that data will be encrypted and authenticated.

Using AH data will be authenticated but not encrypted.